Overview

overview

10

Static

static

10

14daef52b2...58.elf

debian-9-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14daef52b2df156a138c92ddf66ffa58.elf

  • Size

    113KB

  • Sample

    230319-m1ph4sga66

  • MD5

    14daef52b2df156a138c92ddf66ffa58

  • SHA1

    e9b4d469faf5e24308fb9f844b0ba1dc73baa02c

  • SHA256

    13eceb4b809cb883fd19b3d549bd853c950967e5431323b2fecc2824f6392906

  • SHA512

    245e532084690b5b280f4583739f0368082a41165aef9cf9c05b4a0b4a9b487bee7193aecdecef6232fdfa02a2c76a0d5d91aa9a199fcf5f1602c11d8617e5cf

  • SSDEEP

    3072:UmJnlmfYvJMUyNhr5h1zKdwwjF9GhsR1Ae:NdJMUohr5h1zKdwwjF9GhsR1Ae

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      14daef52b2df156a138c92ddf66ffa58.elf

    • Size

      113KB

    • MD5

      14daef52b2df156a138c92ddf66ffa58

    • SHA1

      e9b4d469faf5e24308fb9f844b0ba1dc73baa02c

    • SHA256

      13eceb4b809cb883fd19b3d549bd853c950967e5431323b2fecc2824f6392906

    • SHA512

      245e532084690b5b280f4583739f0368082a41165aef9cf9c05b4a0b4a9b487bee7193aecdecef6232fdfa02a2c76a0d5d91aa9a199fcf5f1602c11d8617e5cf

    • SSDEEP

      3072:UmJnlmfYvJMUyNhr5h1zKdwwjF9GhsR1Ae:NdJMUohr5h1zKdwwjF9GhsR1Ae

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks